Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CiDCQmnrCRawH2WsRTA62DtOejY.roa
File: CiDCQmnrCRawH2WsRTA62DtOejY.roa (raw, json)
Hash identifier: G7G725Qz9hyieido5BW3UJDPOz7VWPtdoQiFaZUMLCY=
Subject key identifier: 0A:20:C2:42:69:EB:09:16:B0:1F:65:AC:45:30:3A:D8:3B:4E:7A:36
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A04BCDC94A4FC34E4416267FA530A91940
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CiDCQmnrCRawH2WsRTA62DtOejY.roa
Signing time: Sat 29 Aug 2026 04:36:12 +0000
ROA not before: Sat 29 Aug 2026 04:36:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 62.76.235.0/24 maxlen: 24
153.76.176.0/24 maxlen: 24
153.76.180.0/24 maxlen: 24
153.76.182.0/24 maxlen: 24
153.76.184.0/24 maxlen: 24
153.76.187.0/24 maxlen: 24
153.76.189.0/24 maxlen: 24
153.76.191.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4b:cd:c9:4a:4f:c3:4e:44:16:26:7f:a5:30:a9:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 29 04:36:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a20c24269eb0916b01f65ac45303ad83b4e7a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:ec:60:02:38:ef:66:8e:1f:96:e0:1c:9c:
63:86:ab:9b:6e:b0:63:17:62:3a:f8:bd:d8:e1:16:
53:c8:1f:c2:7f:62:f1:ec:9e:0e:ab:77:65:8f:07:
97:5d:87:4b:7e:73:64:b7:7f:05:76:df:3e:8e:83:
b2:43:af:6c:52:1a:1a:33:4a:64:9f:df:e0:5b:1b:
ff:6c:f7:3a:4d:8d:50:51:1c:f5:03:e7:ad:0f:f0:
4f:07:6e:06:e2:f7:0a:bb:e8:f5:90:d9:f0:bd:a0:
5d:e8:09:ab:48:ae:99:44:b4:79:d7:04:8c:dd:ec:
8f:89:f0:d1:8f:ee:d1:e4:86:74:6d:3b:aa:94:b6:
af:47:fa:bf:5b:86:64:f7:8e:fa:db:b0:73:97:5d:
a7:b6:55:0b:3e:6c:0a:62:9d:4a:c2:61:68:2c:43:
82:2b:77:31:92:c9:5f:a6:c7:30:fd:d8:84:31:55:
8a:4d:f6:e7:35:11:bb:e3:8d:d2:2e:b5:29:df:43:
95:20:5d:fd:b9:cc:7f:34:a8:73:89:ca:8b:15:6e:
12:9d:e0:fd:fc:6d:95:00:36:c3:70:4c:82:29:a2:
ba:88:d6:e8:4a:66:dd:a6:e2:22:ec:3c:cd:0d:bc:
7b:34:22:d8:f9:f5:f6:c6:ed:9d:8c:83:c0:5c:bf:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:20:C2:42:69:EB:09:16:B0:1F:65:AC:45:30:3A:D8:3B:4E:7A:36
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CiDCQmnrCRawH2WsRTA62DtOejY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.235.0/24
153.76.176.0/24
153.76.180.0/24
153.76.182.0/24
153.76.184.0/24
153.76.187.0/24
153.76.189.0/24
153.76.191.0/24
192.124.183.0/24
193.124.8.0/24
194.87.34.0/24
194.87.63.0/24
194.87.165.0/24
Signature Algorithm: sha256WithRSAEncryption
79:86:fe:40:d3:68:23:0a:a2:d5:77:f7:c7:14:da:45:00:80:
95:0e:dd:59:13:d5:66:cf:5a:8c:17:d9:a6:56:4e:bf:aa:00:
46:53:b3:c4:d5:dc:94:47:38:c8:b3:ec:bf:c6:18:15:4a:87:
5e:c3:a2:e8:b2:f9:62:cd:c3:65:db:ae:68:20:3c:25:0a:0a:
be:f1:17:78:d0:be:f4:3b:1a:1a:e2:fc:55:06:5c:3e:27:72:
f8:c6:0d:4b:1d:c3:98:e9:8b:b9:7e:79:0b:63:a0:bc:2b:4e:
2b:7e:ac:63:cf:d4:6b:a2:f6:95:7b:83:8b:48:af:fe:88:33:
b5:44:f7:1a:4b:de:9d:80:ab:a3:46:1a:3c:93:2e:a4:0e:ca:
37:61:70:d9:ee:a5:44:a3:70:96:c8:45:57:70:76:50:8d:9f:
96:7b:fe:78:43:53:77:8b:f6:d5:2f:1d:6b:f0:38:aa:cd:47:
4d:8b:b7:d9:04:9f:51:fd:35:b5:6a:1a:d0:74:fb:1f:b8:10:
e1:46:a4:61:7b:68:21:a4:52:79:97:6f:8a:0d:ff:25:db:f3:
1b:8d:0b:7f:4d:79:d5:dd:72:d6:1a:5b:46:32:f7:d0:2b:d2:
18:b7:0e:1b:e5:12:5f:7b:72:ac:dd:dc:d1:ce:72:cc:31:c6:
03:bd:a2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:07 2026 by rpki-client